How can you prevent/ encrypt all messages?

Part of the router config:

!

service password-encryption

! username user1 password 7 3456346735735467342

username user2 password 7 3456347636735733567

!

aaa new-model

!

[…]

Device# show archive log config all

idx sess user@line Logged command

1 1 user1@console logging enable

2 1 user1@console logging size 200

A client reports all password in plain text after running ‘show archive log config all’.

How can you prevent/ encrypt all messages?

Device# configure terminal

Device(config)# archive

Device(config-archive) # log config
A . Device(config-archive-log-config)# password encrypt aes
B . Device(config-archive-log-config)# hidekeys
C . Device(config-archive-log-config)# service-password encryption
D . Device(config-archive-log-config)# aaa authentication arap